Ensure Drop Out of State ICMP Packets is enabled

中级别 2人工审核checkpoint

说明

This drops the out of state ICMP packets.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Go to the following path and verify Drop Out of State ICMP Packets and Log on Drop is enabled. SmartConsole > Global Properties > Stateful Inspection Verify Drop Out of State ICMP Packets and Log on Drop is checked.

修复方式

修复方法: 操作指南或基础设施补丁

Go to the following path and checked the Drop Out of State ICMP Packets and Log on Drop. SmartConsole > Global Properties > Stateful Inspection Checked the Drop Out of State ICMP Packets and Log on Drop

属性

操作系统: 任意
标签: checkpointhardening
参考: CIS Check Point Firewall Benchmark v1.1.0 - 3.11 Ensure Drop Out of State ICMP Packets is enabled